Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa
File:                     80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa (raw, json)
Hash identifier:          Z0Sogyk6Do3w13j4+OKoVUFMID+zN/SwvYndzHUuc0s=
Subject key identifier:   98:12:02:49:23:7C:F3:97:75:F1:3D:20:82:46:F7:CE:FE:6E:7F:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       424F5D4AE412CFEF9F9311A00DFF3387728A2886
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        164.145.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4f:5d:4a:e4:12:cf:ef:9f:93:11:a0:0d:ff:33:87:72:8a:28:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=6fffd383daea2375aab6bef927857fe978c97bb23b594ea3f7794a5f12473120, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:25:91:20:0a:e6:c4:fa:a3:60:a7:08:1e:
                    25:3a:5b:d3:22:00:a9:09:9a:f0:24:08:90:43:8c:
                    e9:95:96:42:a8:15:98:0c:4e:b9:6b:7d:37:47:66:
                    33:f8:e2:1b:2d:66:25:1d:ab:91:87:8c:5d:72:b2:
                    ab:f8:84:1b:e2:ef:bc:de:00:82:63:99:a0:1a:b5:
                    bf:05:7a:07:aa:9b:56:85:7e:28:20:d4:b4:23:19:
                    2d:52:e2:24:45:34:66:a8:65:13:6e:a4:0a:9d:e2:
                    3b:d7:fc:36:6c:24:92:75:35:b4:03:1f:62:fe:93:
                    83:1c:37:f3:18:d5:b7:3f:0c:71:29:e3:f1:18:b3:
                    2b:86:d2:53:e9:5f:20:03:37:db:55:a6:d4:22:73:
                    8b:27:64:9f:36:6b:a6:14:73:38:73:4d:99:fe:d0:
                    18:ed:31:2c:90:ac:04:6e:43:29:b8:23:13:09:d2:
                    be:00:38:5d:20:cd:01:04:a0:73:0d:f3:5b:41:30:
                    6e:1a:78:27:ba:cb:4d:24:11:ca:53:4e:2b:27:27:
                    51:1c:77:41:79:4d:41:9e:b3:3d:33:20:57:cb:29:
                    8e:9a:31:36:82:77:25:6a:27:26:70:30:91:b2:8d:
                    ad:8c:25:25:05:95:ab:05:57:a3:d6:31:3f:08:4b:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:02:49:23:7C:F3:97:75:F1:3D:20:82:46:F7:CE:FE:6E:7F:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:d1:80:14:49:2c:7a:3f:c9:00:a9:1e:7f:14:fb:4c:bf:
         46:aa:8b:9e:7b:86:85:db:38:61:25:54:5b:6f:cb:04:ea:d6:
         8f:36:2a:ea:91:00:00:b6:59:e1:f9:55:1f:bd:a0:ec:5c:41:
         05:ca:95:9b:35:2c:48:17:38:8d:b0:a6:ff:10:80:38:54:31:
         7f:da:5a:3a:72:9b:66:cb:4c:32:6a:34:54:db:54:28:42:e1:
         60:e1:f9:8b:b9:be:5b:06:48:71:61:4d:43:2d:e7:0c:c5:71:
         34:1c:ca:12:e4:a1:35:7c:ec:98:06:46:8d:8c:b1:50:ca:64:
         dc:7b:eb:e0:ab:86:8d:c6:63:00:cb:04:46:45:4c:e5:c8:c7:
         f2:ac:a9:5e:4e:3e:38:d8:d6:10:7a:c7:7c:82:ea:58:0e:c1:
         e2:52:b2:33:2c:7e:5e:f5:de:c1:54:9e:75:96:23:ef:dc:df:
         fd:4c:bc:22:65:49:5e:77:5c:85:16:e4:a8:92:42:cc:0d:17:
         fe:2e:2b:94:9a:45:57:64:03:b0:50:e3:d1:a8:50:c1:b9:42:
         3d:c2:2b:ec:5b:f2:83:39:eb:79:8e:8f:32:bf:06:cc:0b:12:
         60:1b:78:7f:d0:ba:46:6e:40:8d:57:1b:52:37:9b:c6:4f:45:
         e0:92:c9:fe
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUQk9dSuQSz++fkxGgDf8zh3KKKIYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEwMDAwMDAwWhcNMjQwNTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZmZmZDM4M2RhZWEyMzc1YWFiNmJlZjkyNzg1N2ZlOTc4
Yzk3YmIyM2I1OTRlYTNmNzc5NGE1ZjEyNDczMTIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBvSWRIArmxPqjYKcIHiU6W9MiAKkJmvAkCJBDjOmVlkKo
FZgMTrlrfTdHZjP44hstZiUdq5GHjF1ysqv4hBvi77zeAIJjmaAatb8Fegeqm1aF
figg1LQjGS1S4iRFNGaoZRNupAqd4jvX/DZsJJJ1NbQDH2L+k4McN/MY1bc/DHEp
4/EYsyuG0lPpXyADN9tVptQic4snZJ82a6YUczhzTZn+0BjtMSyQrARuQym4IxMJ
0r4AOF0gzQEEoHMN81tBMG4aeCe6y00kEcpTTisnJ1Ecd0F5TUGesz0zIFfLKY6a
MTaCdyVqJyZwMJGyja2MJSUFlasFV6PWMT8IS9mFAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUmBICSSN885d18T0ggkb3zv5uf/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgwNDIyYWU3LWQ1MzgtNDA4ZC1iMmIzLTY4ZWU2YWU5OGZmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCkkTANBgkqhkiG9w0BAQsFAAOCAQEAAk7RgBRJLHo/yQCpHn8U+0y/RqqL
nnuGhds4YSVUW2/LBOrWjzYq6pEAALZZ4flVH72g7FxBBcqVmzUsSBc4jbCm/xCA
OFQxf9paOnKbZstMMmo0VNtUKELhYOH5i7m+WwZIcWFNQy3nDMVxNBzKEuShNXzs
mAZGjYyxUMpk3Hvr4KuGjcZjAMsERkVM5cjH8qypXk4+ONjWEHrHfILqWA7B4lKy
Myx+XvXewVSedZYj79zf/Uy8ImVJXndchRbkqJJCzA0X/i4rlJpFV2QDsFDj0ahQ
wblCPcIr7FvygznreY6PMr8GzAsSYBt4f9C6Rm5AjVcbUjebxk9F4JLJ/g==
-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:20 2024 by rpki-client on console-fra.rpki-client.org